We release patches for security vulnerabilities. Which versions are eligible for receiving such patches depends on the CVSS v3.0 Rating:

Please do not report security vulnerabilities through public GitHub issues.

If you discover a security issue, please report it by sending an email to [email protected]

This will allow us to assess the risk and make a fix available before we add a bug report to the GitHub repository.

Thanks!